CARVE: Container-Aware Runtime Verification Evidence for Confidential VM Attestation
Confidential virtual machines (CVMs) protect cloud workloads from untrusted infrastructure. However, existing CVM attestation mechanisms primarily establish trust at launch time …